Archer C50 firmware versions prior to 'Archer C50(JP)V3230505' and Archer C55 firmware versions prior to 'Archer C55(JP)V1230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command.
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicious firmware which could lead to complete compromise of the targeted device.
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50(JP)V3230505', Archer C55 firmware versions prior to 'Archer C55(JP)V1230506', and Archer C20 firmware versions prior to 'Archer C20(JP)V1230616'.
Last updated 24 July 2024
A stack overflow in the function DM In fillobjbystr() of TP-Link Archer C50&A5(US)V5200407 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Use of Hard-coded Credentials in TP-Link Archer C50 V3(
<=
180703)/V4(
<=
250117
)/V5(
<=
200407
), and C20 V5 (<USV5260419 or <EUV5260317) allows attackers to decrypt the config.xml files.
A vulnerability was found in TP-Link Archer C50 V2160801. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221552.
This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to obtain Wi-Fi credentials of the targeted system.